Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: BH2pOngCXza0w7aV2Bwh7cLZFosDTZDxE7EA/FvbtM8=
Subject key identifier: CD:E0:F1:DE:AA:08:9B:06:91:52:F3:DC:44:52:AD:50:41:FC:BF:D7
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 0194BCA9A02448E9D7761B93CAC5031E3F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 0595
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: W0Mem4V4lMI7pfDcESt6bfpYTTLY/B41GSqRVPuwChk=)
2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:24:48:e9:d7:76:1b:93:ca:c5:03:1e:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=cde0f1deaa089b069152f3dc4452ad5041fcbfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:89:d2:51:60:02:df:b1:11:7a:85:20:2a:
db:2b:c9:de:26:ac:50:9f:76:d2:1e:38:85:9d:c4:
24:cd:78:ea:e9:13:8d:b1:dd:d6:2c:a4:4f:3f:a3:
42:14:47:b9:d6:07:00:5f:47:50:e8:38:8f:64:43:
bb:fb:54:be:ef:a2:79:83:0d:7c:45:4e:31:0b:59:
fe:02:2b:86:ee:e9:57:b3:2d:78:37:00:9b:9f:ec:
54:72:40:8a:7c:98:6e:34:ee:10:5b:07:94:ea:9d:
a1:6a:25:bf:f7:b2:f3:32:0b:0d:22:e2:1c:32:90:
3d:e0:7e:57:f3:8f:71:12:14:1b:66:d2:b6:b6:8f:
4a:e0:61:41:9b:45:1d:44:ee:f5:f1:d8:71:c8:7a:
91:eb:e2:48:ae:57:22:7f:e6:2a:3f:06:12:2a:05:
4f:a1:0d:4e:b8:01:3c:90:01:89:be:73:3e:db:8b:
c4:37:ae:ff:d0:2a:01:f4:22:94:38:37:18:af:f5:
ab:7d:22:f1:a8:a4:60:6a:58:c2:70:7b:fe:e4:25:
eb:08:a2:f0:72:02:60:45:1f:2e:90:53:be:22:39:
52:a5:5e:f1:a9:21:0c:cf:d8:c8:2e:ee:83:d0:5b:
ae:b6:0c:2c:96:f6:f9:fe:47:d7:17:e6:0e:d3:30:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:F1:DE:AA:08:9B:06:91:52:F3:DC:44:52:AD:50:41:FC:BF:D7
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c0:d1:86:5e:0a:bc:5d:c2:f0:06:f9:2b:3b:f2:31:50:8e:
7e:00:ad:5a:95:64:f4:77:5a:86:93:21:93:5c:f8:bc:ca:e2:
7d:de:53:17:dc:e0:e2:ee:27:47:2c:4b:9d:4b:ca:cb:69:ef:
78:41:a6:80:be:f1:d8:47:1b:d7:ea:d7:53:4d:a1:97:33:e4:
72:e7:8f:a0:80:b6:43:47:88:64:c4:ab:37:bf:d0:a4:3d:f9:
63:27:4c:14:3e:63:69:ef:6e:bf:45:91:3e:80:b5:36:0c:d2:
e4:08:1d:1c:32:65:15:f2:33:cc:29:a9:36:ee:fc:19:bf:c9:
5b:fa:72:1a:99:57:13:ca:b2:d3:c0:54:db:ce:3a:60:3c:68:
93:c8:f3:07:5a:a0:e3:0e:60:ce:3c:4d:47:a3:ee:53:12:a1:
af:8c:36:89:c8:bc:27:12:18:32:84:54:d4:39:fa:b4:7e:7a:
3e:b1:83:71:d5:a8:54:d5:f8:f0:b1:28:22:3a:4c:f2:b3:26:
b4:66:3e:aa:99:d6:41:ea:e3:61:f9:27:b5:0a:f8:76:36:fd:
52:e9:04:1a:2a:db:23:11:7f:94:b1:1d:d1:69:c8:68:b6:d3:
a6:2a:c9:9a:ef:ba:ee:24:8a:bd:80:7b:62:45:46:ca:9c:26:
ce:dc:af:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaAkSOnXdhuTysUDHj9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNTVmYTJhNjI4MzdkYjlhZmU0NDIzZTRjMTE5ZTk0OTli
MjFiNDMwHhcNMjUwMTMxMTQwMDIwWhcNMjUwMjAxMTQwMDIwWjAzMTEwLwYDVQQD
EyhjZGUwZjFkZWFhMDg5YjA2OTE1MmYzZGM0NDUyYWQ1MDQxZmNiZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzOJ0lFgAt+xEXqFICrbK8neJqxQ
n3bSHjiFncQkzXjq6RONsd3WLKRPP6NCFEe51gcAX0dQ6DiPZEO7+1S+76J5gw18
RU4xC1n+AiuG7ulXsy14NwCbn+xUckCKfJhuNO4QWweU6p2haiW/97LzMgsNIuIc
MpA94H5X849xEhQbZtK2to9K4GFBm0UdRO718dhxyHqR6+JIrlcif+YqPwYSKgVP
oQ1OuAE8kAGJvnM+24vEN67/0CoB9CKUODcYr/WrfSLxqKRgaljCcHv+5CXrCKLw
cgJgRR8ukFO+IjlSpV7xqSEMz9jILu6D0Fuutgwslvb5/kfXF+YO0zAg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3g8d6qCJsGkVLz3ERSrVBB/L/XMB8GA1UdIwQY
MBaAFA1V+ipig325r+RCPkwRnpSZshtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMt
ZWYzNmEzMjE3NDlhLzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMtZWYzNmEzMjE3NDlh
LzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsDRhl4K
vF3C8Ab5KzvyMVCOfgCtWpVk9HdahpMhk1z4vMrifd5TF9zg4u4nRyxLnUvKy2nv
eEGmgL7x2Ecb1+rXU02hlzPkcuePoIC2Q0eIZMSrN7/QpD35YydMFD5jae9uv0WR
PoC1NgzS5AgdHDJlFfIzzCmpNu78Gb/JW/pyGplXE8qy08BU2846YDxok8jzB1qg
4w5gzjxNR6PuUxKhr4w2ici8JxIYMoRU1Dn6tH56PrGDcdWoVNX48LEoIjpM8rMm
tGY+qpnWQerjYfkntQr4djb9UukEGirbIxF/lLEd0WnIaLbTpirJmu+67iSKvYB7
YkVGypwmztyv6w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:23 2025 by rpki-client